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A survey on peer-to-peer key management for mobile ad hoc networks 
Johann Van Der Merwe, Dawoud Dawoud, Stephen McDonald 
April 2007 ACM Computing Surveys (CSUR), volume 39 issue l 
Publisher: ACM Press 

Full text available: Q pdf(872.71 KB) Additional Information: full citation , abstract , references , index terms 

The article reviews the most popular peer-to-peer key management protocols for mobile 
ad hoc networks (MANETs). The protocols are subdivided into groups based on their 
design strategy or main characteristic. The article discusses and provides comments on 
the strategy of each group separately. The discussions give insight into open research 
problems in the area of pairwise key management. 



Keywords: Mobile ad hoc networks, pairwise key management, peer-to-peer key 
management, security 



2 Design and modelling of internode: a mobile provider provisioned VPN 
Francisco Barcelo, Josep Paradells, Fofy Setaki, Monique Gibeaux 
February 2003 Mobile Networks and Applications, volume 8 issue l 
Publisher: Kluwer Academic Publishers 

Full text available: *Q pdf(237.48 KB) Additional Information: full citation , abstract , references , index terms 

This paper presents the design and architecture of a mobile Provider Provisioned VPN 
(PPVPIM) together with a performance evaluation oriented model that allows first 
estimates of the VPN set-up delay to be computed. At the same time, some consequences 
of the discussion can be applied to the design of the VPN configuration parameters. Many 
different technologies and protocols are used: access is supplied through GPRS or • 
WaveLANs, IP mobility is supported by Mobile IP, and the VPN is based on the I ... 

Keywords: IPSec, VPN, mobile IP, mobile VPN, provider provisioned VPN 




3 New basic technologies for DIM: Pseudonym management using mediated identity- Q 
based crypto graphy 

Thibault Candebat, Cameron Ross Dunne, David T. Gray 
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November 2005 Proceedings of the 2005 workshop on Digital identity management 
DIM '05 

Publisher: ACM Press 

Full text available: ^ pdf(293.16 KB) Additional Information: full citation , abstract , references , index terms 

Mobile Location-Based Services (LBS) have raised privacy concerns amongst mobile 
phone users who may need to supply their identity and location information to 
untrustworthy third parties in order to access these applications. Widespread acceptance 
of such services may therefore depend on how privacy sensitive information will be 
handled in order to restore users' confidence in what could become the "killer app" of 3G 
networks. In this paper, we present a proxy-based public key infrastructure tha ... 

Keywords: SEM architecture, identity-based encryption, location-based services, 
pseudonymity 



4 Introduction of the asymmetric cr yptograph y in GSM. GPRS. UMTS, and its public 
ke y infrastructure integration 

Constantinos F. Grecas, Sotirios I. Maniatis, Iakovos S. Venieris 
April 2003 Mobile Networks and Applications, volume 8 issue 2 

Publisher: Kluwer Academic Publishers 

Full text available: *Q pdf(107,24 KB ) Additional Information: full citation , abstract , references , index terms 

The logic ruling the user and network authentication as well as the data ciphering in the 
GSM architecture is characterized, regarding the transferring of the parameters employed 
in these processes, by transactions between three nodes of the system, that is the MS, 
actually the SIM, the visited MSC/VLR, and the AuC, which is attached to the HLR in most 
cases. The GPRS and the UMTS architecture carry the heritage of the GSM's philosophy 
regarding the user/network authentication and the data ciphe ... 

Keywords: PKIs, PLMNs, asymmetric cryptography 



5 Security as a new dimension in embedded system desi g n: Security as a new Q 
<^ dimension in embedded system desi gn 

^ Srivaths Ravi, Paul Kocher, Ruby Lee, Gary McGraw, Anand Raghunathan 

June 2004 Proceedings of the 41st annual conference on Design automation DAC '04 

Publisher: ACM Press 

r- n * ^ ■■ ui 01 jr/onn < n „ D v Additional Information: full citation , abstract , references , citings , index 

Full text available: TO pdf(209.10 KB) 

^ terms 

The growing number of instances of breaches in information security in the last few years 
has created a compelling case for efforts towards secure electronic systems. Embedded 
systems, which will be ubiquitously used to capture, store, manipulate, and access data of 
a sensitive nature, pose several unique and interesting security challenges. Security has 
been the subject of intensive research in the areas of cryptography, computing, and 
networking. However, despite these efforts, security is ... 

Keywords: PDAs, architectures, battery life, cryptography, design, design 
methodologies, digital rights management, embedded systems, performance, security, 
security processing, security protocols, sensors, software attacks, tamper resistance, 
trusted computing, viruses 

6 E-g ovemment services and policy track: Using a common architecture in Australian Q 
e-Government: the case of smart service Queensland 

Nigel Martin, Shirley Gregor, Dennis Hart 
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March 2004 Proceedings of the 6th international conference on Electronic commerce 
ICEC '04 

Publisher: ACM Press 

Full text available: ^| pdf(502.88 KB) Additional Information: full citation , abstract , references , index terms 

In this paper, we present the findings of a case study which examines the use of 
enterprise architectures in the context of the development and implementation of an 
Electronic Government (e-Government) Services Delivery initiative by the Queensland 
State government of Australia. The paper employs strategic alignment theory to critically 
examine the progress of the initiative from the development of public policy and business 
case documents, through to the pilot program, and progressive implement ... 

Keywords: J2EE, architecture, business, electronic, robustness, scalability, service, 
smart, standardization, system, trust 



7 On the impact of quality of protection in wireless local area networks with IP mobility Q 
A. Avesh K. Agarwal, Wenye Wang 

^ January 2007 Mobile Networks and Applications, volume 12 issue 1 
Publisher: ACM Press 

Full text available: ^|pdf (570.49 KB) Additional Information: full citation , abstract , references , index terms 

Wireless local area networks (LANs) are vulnerable to malicious attacks due to their 
shared medium in unlicensed frequency spectrum, thus requiring security features for a 
variety of applications even at the cost of quality of service (QoS). However, there is very 
little work on investigating to what extent system performance is affected by security 
configurations with respect to mobility scenarios, heterogeneous networks, and different 
applications. In order to exploit the full potential of exi ... 

Keywords: mobile IP, performance analysis, quality of protection, quality of service, 
security protocols, wireless local area networks 



A secure infrastructure for service discovery and access in pervasive computing 
Jeffrey Undercoffer, Filip Perich, Andrej Cedilnik, Lalana Kagal, Anupam Joshi 
April 2003 Mobile Networks and Applications, volume 8 issue 2 

Publisher: Kluwer Academic Publishers 

f— 11 * \ .. a , fy0 n 0 ^ i/ D \ Additional Information: full citation , abstract , references , citings , index 

Full text available: TO pdf(308.34 KB) 

" terms 

Security is paramount to the success of pervasive computing environments. The system 
presented in this paper provides a communications and security infrastructure that goes 
far in advancing the goal of anywhere-anytime computing. Our work securely enables 
clients to access and utilize services in heterogeneous networks. We provide a service 
registration and discovery mechanism implemented through a hierarchy of service 
management. The system is built upon a simplified Public Key Infrastructure t ... 

Keywords: distributed services, extensible markup language, pervasive computing, 
security, smartcards 



9 Formal analysis of card-based payment systems in mobile devices 

Vijayakrishnan Pasupathinathan, Josef Pieprzyk, Huaxiong Wang, Joo Yeon Cho 

January 2006 Proceedings of the 2006 Australasian workshops on Grid computing 

and e-research - Volume 54 ACSW Frontiers '06 
Publisher: Australian Computer Society, Inc. 

Full text available: Q pdf ( 169.95 KB ) Additional Information: full citation , abstract , references , index terms 
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To provide card holder authentication while they are conducting an electronic transaction 
using mobile devices, VISA and MasterCard independently proposed two electronic 
payment protocols: Visa 3D Secure and MasterCard Secure Code. The protocols use pre- 
registered passwords to provide card holder authentication and Secure Socket Layer/ 
Transport Layer Security (SSL/TLS) for data confidentiality over wired networks and 
Wireless Transport Layer Security (WTLS) between a wireless device and a Wirel ... 

Keywords: card-based systems, electronic payments, formal verification, mobile 
payment 



10 Ad hoc network: A security design for a general purpose, self-organizing, multihop ad Q 
hoc wireless network 

Thomas S. Messerges, Johnas Cukier, Tom A. M. Kevenaar, Larry Puhl, Rene Struik, Ed 
Callaway 

October 2003 Proceedings of the 1st ACM workshop on Security of ad hoc and sensor 
networks SASN '03 

Publisher: ACM Press 

Full text available: ^| pdf(353.25 KB) Additional Information: full citation , abstract , references , index terms 

We present a security design for a general purpose, self-organizing, multihop ad hoc 
wireless network, based on the IEEE 802.15.4 low-rate wireless personal area network 
standard. The design employs elliptic-curve cryptography and the AES block cipher to 
supply message integrity and encryption services, key-establishment protocols, and a 
large set of extended security services, while at the same time meeting the low 
implementation cost, low power, and high flexibility requirements of ad hoc wire ... 

Keywords: 802.15.4, ad hoc networks, security, wireless 




11 Securing the global, remote, mobile user 
Walt Curtis, Lori Sinton 

March 1999 International Journal of Network Management volume 9 issue l 
Publisher: John Wiley & Sons, Inc. 

Full text available: ^ pdf(982.14 KB) Additional Information: full citation , abstract , index terms 

Electronic commerce is inevitable and will reshape our lives, but before true electronic 
commerce environments can be realized, it will be necessary to secure your enterprise 
against outside attacks on its electronic information and provide controls for authorized 
access to that information. Copyright © 1999 John Wiley & Sons, Ltd. 

12 Web technologies and applications (WTA): Usin g XML and related standards to 
^ sup port Location Based Services 

^ Anastasios Ioannidis, Manos Spanoudakis, Panos Sianas, Ioannis Priggouris, Stathes 
Hadjiefthymiades, Lazaros Merakos 

March 2004 Proceedings of the 2004 ACM symposium on Applied computing SAC '04 

Publisher: ACM Press 

Full text available* IS odf(270 83 KB) Additional Information: full citation , abstract , references , citings , index 
' ^ terms 

Location Based Services can be considered as the most rapidly expanding field of the 
mobile communications sector. The proliferation of the mobile/wireless Internet, the 
constantly increasing use of handheld, mobile devices and positioning technologies and 
the emergence of mobile computing, prepared the grounds for the introduction of this 
new type of services with impressively large application domain and use range. The 
combination of position fixing mechanisms with location-dependent, georgrap ... 



http://portal.acm.org/results.cfm?CFID=23524382&CFTOKEN=92395407&adv=l&COLL=... 5/24/07 



Results (page 1): ^"digital certificate" ^provision mobile cellular wireless 



Page 5 of 7 



Keywords: Web Services, XML, location based Services 



13 Dependable Dynamic Source Routing without a trusted third part y Q 
Asad Amir Pirzada, Chris McDonald, Amitava Datta 

January 2005 Proceedings of the Twenty-eighth Australasian conference on Computer 
Science - Volume 38 ACSC '05 

Publisher: Australian Computer Society, Inc. 

Full text available: ^| pdf(320.47 KB) Additional Information: full citation , abstract , references , index terms 

Ad-hoc networks are frequently used to establish communication in improvised 
environments without requiring any fixed infrastructure. These networks are formed with 
the help of their constituent wireless nodes, which are expected to forward packets for 
other nodes according to a pre-agreed upon protocol. The Dynamic Source Routing (DSR) 
protocol is one such protocol that helps to create and maintain routes in an ad-hoc 
network in spite of the dynamic topology. The accurate execution of this prot ... 

Keywords: ad -hoc, networks, protocols, security, trust 



14 Mobile services and technology track: A conceptual approach to information security Q 

in financial account aggregation 
^ Manish Agrawal, Hemant Padmanabhan, Lokesh Pandey, H. R. Rao, Shambhu Upadhyaya 

March 2004 Proceedings of the 6th international conference on Electronic commerce 
ICEC '04 

Publisher: ACM Press 

Full text available:^ pdf{ 1 73.70 KB) Additional Information: full citation , abstract , references 

An important dimension of mobile computing is the ubiquitous and location-independent 
availability of data. Aggregation is the ability to electronically access and display personal 
account information from disparate sources through a single identity. The client financial 
data is assembled in an organized format providing meaningful summarization and 
analysis. The prevalent methods of aggregation pose issues in information security and 
assurance. Utilizing advances in Internet technology such as ... 

Keywords: account service providers, aggregation, identity service providers, scraping 



15 Securit y: Fast authenticated key establishment protocols for self-organizin g sensor Q 
networks 

Qiang Huang, Johnas Cukier, Hisashi Kobayashi, Bede Liu, Jinyun Zhang 
September 2003 Proceedings of the 2nd ACM international conference on Wireless 

sensor networks and applications WSNA '03 
Publisher: ACM Press 

Full text available: H) pdf(303.05 KB) Additional Information: full citation , abstract , references , index terms 

In this paper, we consider efficient authenticated key establishment protocols between a 
sensor and a security manager in a self-organizing sensor network. We propose a hybrid 
authenticated key establishment scheme, which exploits the difference in capabilities 
between security managers and sensors, and put the cryptographic burden where the 
resources are less constrained. The hybrid scheme reduces the high cost public-key 
operations at the sensor side and replaces them with efficient symmetric- ... 

Keywords: elliptic curve cryptography, key establishment, security, sensor network 
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